CVE-2025-54255

Published: Sep 9, 2025Modified: Jun 17, 2026

4.0

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.5 / Impact: 1.4

Source: NVD

Description

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Affected (6)

Products: Adobe: Acrobat, Acrobat Dc, Acrobat Reader Dc, Acrobat Reader

4 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	From 24.0.0 to 24.001.30264
Adobe Acrobat Dc	From 15.008.20082 to 25.001.20693
Adobe Acrobat Reader Dc	From 15.008.20082 to 25.001.20693

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	From 20.001.30002 to 20.005.30793

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	From 20.001.30002 to 20.005.30791
Adobe Acrobat Reader	From 20.001.30002 to 20.005.30791

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

CWE-657

Violation of Secure Design Principles

The product violates well-established principles for secure design.

References (1)

https://helpx.adobe.com/security/products/acrobat/apsb25-85.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.